CVE-2024-27148 Local Privilege Escalation and Remote Code Execution using insecure PATH

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL...

CVE-2023-27148

A stored cross-site scripting XSS vulnerability in the Admin panel in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Role Name parameter...

CVE-2023-27148

A stored cross-site scripting XSS vulnerability in the Admin panel in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Role Name parameter...

CVE-2023-27148

A stored cross-site scripting XSS vulnerability in the Admin panel in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Role Name parameter...

CVE-2023-27148

CVE-2023-27148 describes a stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket Admin panel (v1.17.2). The flaw allows an attacker to inject arbitrary web scripts or HTML via the Role Name parameter, enabling potential script execution in the context of authenticated users with...

CVE-2022-27148

creationtimestamp| type| source ---|---|--- 2022-04-08 20:16:15+00:00| seen| https://t.me/cibsecurity/40390...

CVE-2022-27148

GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...

CVE-2022-27148

CVE-2022-27148 : GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to an integer overflow. The connected Gentoo advisory (GLSA-2024-08-21) suggests upgrading GPAC to a newer release (e.g., gpac-2.2.0) as a resolution. Other sources (NVD/OSV/NASL) reaffirm the same affected package and...

CVE-2021-27148

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin / nE7jA%5m credentials for an ISP...

CVE-2021-27148

Summary of CVE-2021-27148 (FiberHome HG6245D): The vulnerability affects FiberHome HG6245D ONT routers/IGIN via RP2613, where the device web daemon embeds hardcoded credentials (telecomadmin / nE7jA%5m) used by an ISP. The provided documents confirm the affected component is the web daemon and th...

CVE-2020-27148

creationtimestamp| type| source ---|---|--- 2021-01-12 21:24:17+00:00| seen| https://t.me/cibsecurity/21967...

CVE-2020-27148

The CVE-2020-27148 issue affects TIBCO EBX Add-ons (EBX Add-on for Oracle Hyperion EPM, EBX Data Exchange Add-on, EBX Insight Add-on) up to version 4.4.2. Root cause: an XML External Entity (XXE) vulnerability that an attacker with network access and low privileges could potentially exploit. Impa...

TIBCO Security Advisory: January 12, 2021 - TIBCO EBXAdd-ons

TIBCO EBX EXML External Entity Original release date: January 12, 2021 Last revised: CVE-2020-27148 Source: TIBCO SoftwareInc. TIBCO EBX EXML External Entity Original release date: January 12, 2021 Last revised: --- Source: TIBCO Software Inc. Systems Affected TIBCO EBX Add-ons versions 4.4.2 and...

TIBCO Security Advisory: January 12, 2021 - TIBCO EBXAdd-ons

TIBCO EBX EXML External Entity Original release date: January 12, 2021 Last revised: CVE-2020-27148 Source: TIBCO SoftwareInc. TIBCO EBX EXML External Entity Original release date: January 12, 2021 Last revised: --- Source: TIBCO Software Inc. Systems Affected TIBCO EBX Add-ons versions 4.4.2 and...